Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e61e0f71-6f45-35b3-a092-52aba0866b0f.roa
File:                     e61e0f71-6f45-35b3-a092-52aba0866b0f.roa (raw, json)
Hash identifier:          XLK+1iD5uztT7Je1BSqxsoFXL8CVvWpmEtULJdWABnI=
Subject key identifier:   C0:51:8D:7F:37:F3:B9:23:F0:90:38:31:9A:50:A3:5A:FA:6B:70:BC
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F432858494B6415ACB3E07CEED3B7E100
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e61e0f71-6f45-35b3-a092-52aba0866b0f.roa
Signing time:             Mon 24 Mar 2025 13:00:53 +0000
ROA not before:           Mon 24 Mar 2025 13:00:53 +0000
ROA not after:            Sun 22 Jun 2025 13:00:53 +0000
asID:                     3223
IP address blocks:        172.94.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4b:64:15:ac:b3:e0:7c:ee:d3:b7:e1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Mar 24 13:00:53 2025 GMT
            Not After : Jun 22 13:00:53 2025 GMT
        Subject: CN=8c533155-ad65-470d-85e8-aaac78b64559
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e2:cc:7a:23:3c:30:e8:ed:13:8c:df:09:1b:
                    b8:f9:57:84:9a:f5:23:51:d2:63:dd:7d:89:ee:ea:
                    cc:36:8e:a1:bb:e7:0f:80:32:f8:bf:ee:9d:d0:c4:
                    3b:9e:30:dd:c0:25:bc:89:99:da:87:0d:7e:75:f2:
                    e7:4a:3b:4f:20:8b:bf:f4:21:c0:97:d5:c6:c1:f3:
                    2a:f2:df:4b:f6:b1:b1:5e:19:62:d2:3f:70:80:b4:
                    9f:4b:45:92:14:26:8e:e3:b9:81:14:df:87:33:36:
                    8d:04:dc:0e:95:82:b8:dd:fd:0f:f5:61:b6:05:69:
                    72:d5:59:c1:1c:d6:cd:7d:f3:0e:2f:2b:0d:44:bf:
                    c9:18:9a:da:2f:52:81:37:04:0f:31:2f:77:66:97:
                    5e:45:e4:e3:ef:e7:11:97:8a:4f:8a:81:ef:d0:63:
                    1c:9b:91:3e:57:de:89:28:bd:53:4f:8e:38:dc:68:
                    4d:56:80:f8:38:5e:43:ef:13:c9:fb:59:c2:40:8a:
                    da:ab:82:1d:c6:7b:40:e2:15:ce:a6:2b:26:17:6a:
                    6e:bf:80:5c:df:76:09:cc:9e:c5:01:bc:c8:56:ea:
                    30:69:b3:7b:6d:05:a8:c3:90:f0:67:bf:e2:18:01:
                    66:ac:7a:23:44:ff:a7:7f:61:64:e3:5f:68:3f:8a:
                    8b:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:51:8D:7F:37:F3:B9:23:F0:90:38:31:9A:50:A3:5A:FA:6B:70:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e61e0f71-6f45-35b3-a092-52aba0866b0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.94.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:4d:b6:9c:e3:60:12:0c:86:f6:46:50:14:c3:db:10:99:13:
         92:28:44:3a:eb:cc:6e:7c:26:bd:40:6e:c3:99:59:e1:89:b3:
         6c:fd:2f:11:d6:6c:1e:e7:c0:82:7b:d2:0e:f1:e1:d5:bc:f0:
         51:e9:ac:8c:b0:dc:7c:13:2c:68:aa:04:71:f7:b1:4f:8e:f3:
         b5:f2:52:fd:9d:cf:b8:fc:0b:19:96:f8:2c:d3:a9:ce:8f:c3:
         c2:93:06:52:d0:ce:cf:2c:9f:be:31:9d:69:e2:a2:00:d4:a6:
         dc:8d:14:c9:07:01:5c:d2:4f:c3:4e:9a:31:88:0a:0a:ff:c5:
         e0:80:a9:c8:0e:5e:c7:12:77:ac:0c:0d:54:26:5d:0e:da:71:
         bb:2c:6c:c2:e6:ff:69:60:6f:5c:15:7f:fa:a8:1d:55:4d:84:
         a9:86:8b:2a:9c:6a:76:08:c5:f2:53:6c:a1:29:36:99:ab:eb:
         77:9f:8d:25:8d:cf:61:d8:34:68:7f:aa:f6:4d:8a:d7:d4:f6:
         4e:98:6d:2a:2e:5c:a2:d3:b9:f9:b9:36:fa:ad:84:52:04:38:
         27:0a:b9:f0:53:bd:7e:cd:45:96:3c:60:ed:fe:8a:cb:5c:cb:
         00:81:92:bf:11:ea:39:80:cd:87:18:e7:71:30:5e:ff:96:c3:
         90:7f:bc:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:27:07 2025 by rpki-client